Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: +0I2ldFmg6q2qGKbr5+vMOoVqTsvcEyIOYEXSzd35Ag=
Subject key identifier: D5:CD:24:60:D5:BC:35:27:72:1D:58:33:F5:1E:20:16:A0:07:CD:A1
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 0197432F983B347FF40F3C05948DEE0C95C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 06FB
Signing time: Fri 06 Jun 2025 03:01:22 +0000
Manifest this update: Fri 06 Jun 2025 03:01:22 +0000
Manifest next update: Sat 07 Jun 2025 03:01:22 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: dlQovnLc/PS3a8cF6p4s2LpfS3mqucVRhHoZtiPRlps=)
2: pWMenEyK3oj7AZ6h81KI2eooBIo.roa (hash: 6KZd57Ad66QVQkNRU3497fAssJrDtYq8EPVr4qqDMKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 03:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:43:2f:98:3b:34:7f:f4:0f:3c:05:94:8d:ee:0c:95:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Jun 6 03:01:22 2025 GMT
Not After : Jun 7 03:01:22 2025 GMT
Subject: CN=d5cd2460d5bc3527721d5833f51e2016a007cda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:9b:af:bd:df:64:61:86:19:a4:3e:c5:0e:
d4:2b:6e:cd:a1:1a:4c:0f:48:b4:05:e4:d6:17:b2:
2c:34:80:b7:d0:60:86:61:23:41:e0:6e:f2:00:3d:
28:99:0c:17:15:2c:16:99:42:fe:cf:8c:71:60:5b:
ca:ee:b8:40:53:fe:6e:cd:f1:12:57:74:7e:55:4a:
79:ce:9a:69:58:1a:80:bd:81:aa:f8:49:ca:a3:fb:
a4:4f:cd:7d:b8:be:4f:58:fe:29:7a:dd:4c:8f:97:
7e:bc:83:a1:db:5c:57:6f:ba:99:ba:4a:02:32:15:
33:cc:75:0a:e2:c5:50:b1:2a:f6:ac:ea:9b:e0:56:
e6:33:ef:89:2e:eb:85:15:24:01:b4:2e:af:76:67:
b1:5e:c2:72:35:a8:c0:b7:a2:3d:23:9f:59:7d:32:
bc:1a:51:9e:07:f2:46:cc:83:37:2e:54:17:0b:81:
be:2f:c8:c0:f8:79:8d:dd:ef:08:07:82:0a:79:0c:
53:d2:b0:2e:9a:7d:b9:a9:7d:bf:89:20:0e:a6:bc:
3e:15:0d:b4:03:b3:a5:58:60:44:42:75:a6:a6:c5:
6c:c2:38:47:66:3a:6f:eb:00:c9:fa:9c:1b:5b:e7:
f7:de:1d:69:a5:d1:87:83:bf:9d:12:65:30:30:48:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:CD:24:60:D5:BC:35:27:72:1D:58:33:F5:1E:20:16:A0:07:CD:A1
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:7f:a2:44:73:c7:5d:4a:a0:2b:d6:cb:f5:2a:ba:6a:a8:7c:
e7:c9:37:bf:d8:4b:43:d3:ca:a3:6a:f0:69:56:ec:ef:0d:80:
54:9d:c5:7d:e9:c7:1e:4b:71:c6:46:8e:31:d1:b9:02:af:d5:
37:84:ac:31:25:30:52:af:e7:0f:6e:3d:71:ec:8e:47:12:09:
c6:c3:89:74:0c:f4:68:7c:3d:ff:4c:03:ae:e0:9d:26:45:42:
85:49:d1:4f:53:34:c9:db:02:5f:17:bb:4d:3f:0b:57:01:e3:
7b:2f:4b:1e:f3:af:c4:6f:9f:03:49:f1:1c:40:4f:84:e1:95:
c9:24:78:42:63:fb:e7:4e:45:c4:83:84:59:d6:1d:8a:c0:ec:
6c:47:72:d7:0c:82:1c:9a:94:40:65:ed:15:0a:72:3a:bd:de:
92:03:1e:13:63:ce:5e:e1:26:1e:fa:fb:e2:98:e4:7f:38:6f:
f3:21:2e:9c:19:d3:bd:fa:a8:fc:0f:73:65:73:fe:82:05:17:
26:34:5f:ce:5e:ff:74:fd:3d:46:3c:38:4a:b4:d0:f9:61:f4:
55:92:e3:b0:94:22:f2:77:f7:f2:19:54:71:fb:82:62:03:2d:
91:87:b8:ed:34:4a:c5:9b:f5:da:9b:e6:06:b8:63:16:a8:75:
76:b3:15:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:38:00 2025 by rpki-client